Skip to content

Commit b147326

Browse files
authored
Add summary of Trustee services setup and launch
Summarize the steps taken to set up Trustee services and launch a Confidential Container.
1 parent c431d1d commit b147326

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

  • content/learning-paths/servers-and-cloud-computing/cca-kata

content/learning-paths/servers-and-cloud-computing/cca-kata/flow.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -292,3 +292,4 @@ Stop all Trustee service containers with:
292292
```bash
293293
docker compose down
294294
```
295+
In this section, you brought up the Trustee services (AS, KBS, and RVPS) along with a local Docker registry, published an encrypted container image, and configured the environment so a guest running in an Arm CCA Realm could trust and pull from that registry. You then calculated and endorsed a Realm Initial Measurement (RIM), enabling successful attestation and allowing the guest to retrieve the decryption key from KBS. Finally, you launched a Confidential Container from the encrypted image and verified it was running inside a Realm by checking RME-related kernel messages.

0 commit comments

Comments
 (0)